root/public: links for secretmanager